Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File:                     kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier:          XBR4MWXa1EfqzLlNKzJcGqxQ/uLHPx05Z5AurEzNeLw=
Subject key identifier:   D9:3E:9B:05:2E:37:D1:63:2C:D0:13:81:B1:36:DD:28:2A:18:16:F0
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer:       /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial:       0565
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number:          0543
Signing time:             Mon 28 Sep 2026 23:43:51 +0000
Manifest this update:     Mon 28 Sep 2026 23:43:51 +0000
Manifest next update:     Mon 05 Oct 2026 23:43:51 +0000
Files and hashes:         1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: UcgTDrK9RwW9YIq/iMSPbs9jas7d6IV/Diix8DXlO4Q=)
                          2: 693FD0A8127911F18FB8754C353D8C67.roa (hash: 2vsh9mlCd8KP8ShN9kNL1OPBZD5VxMSn/p2bSQnyh44=)
                          3: CF78AD96127811F183C0012F353D8C67.roa (hash: yTs4slfJUp8xAoMRVrm1EmE1KgWXBTMHYKJoI1jT1pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
                          rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 23:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
        Validity
            Not Before: Sep 28 23:43:51 2026 GMT
            Not After : Oct  5 23:43:51 2026 GMT
        Subject: CN=6abafbb7-fe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:5d:54:1e:2f:14:a0:20:14:0c:d8:79:a5:
                    a2:cb:3e:22:85:87:3e:35:ea:82:9c:a3:92:18:bb:
                    4c:bb:40:8d:b1:ae:9a:04:21:bd:76:24:32:de:22:
                    4b:73:cb:91:a7:69:ff:4c:07:c1:d8:5e:92:17:c6:
                    d4:4d:72:b1:6f:4d:ac:5e:6f:29:07:84:f4:24:2d:
                    f1:7c:7d:0a:0f:19:11:07:5b:36:37:2d:bb:52:70:
                    a2:bf:f8:59:7f:5b:3c:8e:5d:56:49:e6:60:4e:76:
                    40:d3:b9:54:5f:7b:82:5c:cb:9f:b6:ea:af:d2:93:
                    79:61:ce:81:70:35:c3:56:7d:86:35:ee:f6:9d:74:
                    c3:46:74:85:32:6e:66:c0:8a:4d:f8:19:55:81:cb:
                    d8:fe:87:92:ce:3d:48:6a:52:1d:d3:06:32:10:98:
                    32:dc:d2:87:35:9c:8e:e9:dc:5b:5c:1c:7b:a6:63:
                    26:10:35:34:dd:78:f7:84:c8:68:ad:5a:6a:16:14:
                    2e:e1:26:ec:92:62:ee:6a:b4:7a:1c:ba:ed:15:3a:
                    80:43:60:02:ba:ed:bc:17:4c:45:3a:5d:0c:b7:73:
                    89:7c:5a:a8:26:29:fd:06:de:84:8b:3f:03:5a:77:
                    3f:20:be:72:55:59:3b:6f:32:6e:71:42:de:ae:d5:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3E:9B:05:2E:37:D1:63:2C:D0:13:81:B1:36:DD:28:2A:18:16:F0
            X509v3 Authority Key Identifier:
                keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:3b:f3:20:e9:98:d3:ab:17:02:48:23:db:27:22:a7:d2:0b:
         9e:0a:65:17:e7:5b:96:50:7d:41:fe:63:04:cb:6e:6f:c5:3e:
         e3:25:be:24:57:45:fd:57:7a:48:60:fd:65:22:bb:7c:35:59:
         a3:f7:3d:0a:65:ff:90:3d:33:27:b1:bd:d1:0b:e0:13:6c:30:
         5a:69:76:2d:6c:b5:ec:06:70:61:86:1d:3d:7d:ca:e0:c4:eb:
         a9:3d:d5:ab:b3:24:d3:e8:7f:10:89:7a:93:a7:7c:2b:a3:87:
         ca:0c:b7:35:68:ce:55:18:12:15:a8:bc:fc:0d:1d:40:80:26:
         bc:db:49:3d:43:41:7b:fd:40:89:74:ae:a8:10:5f:64:7b:f6:
         39:e0:14:c9:a8:7f:35:6b:ef:65:12:2e:68:46:52:a3:c9:a1:
         30:16:6e:30:0f:01:02:e1:4c:41:e9:8a:1f:7b:0b:06:de:57:
         82:7f:73:d1:37:f2:ec:da:ba:89:4d:1f:73:61:30:20:ff:55:
         21:42:68:52:14:27:57:9f:c9:d1:08:aa:b3:ef:a7:50:e6:9b:
         3d:f4:c9:36:a5:0a:dd:1e:44:fe:16:8e:90:d4:9e:1a:d2:5e:
         26:d4:ba:42:a7:68:58:7d:d0:86:99:da:a6:b1:0b:a7:f5:aa:
         d0:57:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:21:53 2026 by rpki-client